OK just to close it off and for others that might search for a solution.

I had to create a "Deny" ACE and also set the same permissions for the directory containing the file I do not want the user to delete. Also the permissions I selected prevent the user from modifying the directory contents (add or delete files). Added bonus, for me. Of course if the user has rights, the permission can be changed.